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WHAT IS CLAIMED IS : 

1 . A method for processing network packets on a computer network, 
comprising: 

5 transferring the network packets over the computer network based on a 

policy wherein network packets having a high priority are transferred before network 
packets having a low priority; and 

performing cryptographic processing of the network packets using the 

policy. 
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2. The method of claim 1, wherein cryptographic processing includes 
encryption and decryption of network packets. 

3. The method of claim 1, wherein cryptographic processing is performed 

1 5 such that processing of the network packets having a low priority are suspended in favor 
of the network packets having the high priority. 



4. The method of claim 1, wherein the policy is a quality of service policy 

f'jj model. 
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if If 5. The method of claim 1, wherein performing cryptographic processing 

,J * further comprises processing the network packets having the highest priority and 

|; 3 continually checking whether a higher-priority network packet than a network packet 

u being processed is available for processing. 
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6. The method of claim 5, further comprising determining that a higher- 
priority packet than the network packet being processed is available to have 
cryptographic processing performed and suspending processing of the network packet 
being processed and processing instead the higher-priority network packet. 

7. A method for processing network packets on a computer network, 
comprising: 

transferring the network packets over the network using quality of service 
programs that are based on quality of service policies; 
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performing cryptographic processing on the network packets using the 
quality of service policies; 

wherein network packets having a high priority are transferred and 
cryptographically processed before network packets having a low priority. 
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8. The method of claim 7, wherein the quality of service policies are rules 
and criteria regarding a priority of the network packets. 

9. The method of claim 7, wherein cryptographic processing includes 

1 0 periodically determining whether a higher-priority network packet than a current network 
packet being processed requires cryptographic processing. 

10. The method of claim 9, wherein cryptographic processing includes 
stopping the current network packet being processed and processing the higher-priority 
network packet. 

1 1 . The method of claim 7, wherein cryptographic processing is performed 
using Internet protocol security programs for encrypting and decrypting the network 
packets. 

12. A network packet management system for managing network packets on 
a computer network, comprising: 

a quality of service policy module that contains priority polices for 
handling of the network packets; 

a quality of service module in communication with the quality of service 
policy module that manages the sequencing of the network packets over the computer 
network based on the priority policies; and 

a internet protocol security module in communication with the quality of 
service policy module that manages the encryption and decryption of the network 
packets based on the priority polices. 

13. The network packet management system of claim 12, wherein the 
internet protocol security module comprises an encryption module for encrypting network 
packets and a decryption module for decrypting network packets. 
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14. The network packet management system of claim 12, wherein the priority 
policies are based on a quality of service policy model. 

15. The network packet management system of claim 12, wherein the priority 
polices are regulations that govern the order in which network packets are processed by 
the quality of service module and the internet protocol security module. 

16. The network packet management system of claim 15, wherein the 
encryption module encrypts the network packets in order of priority with the highest- 
priority network packet being processed first. 

17. The network packet management system of claim 16, wherein the 
encryption module receives a higher-priority network packet during the encryption of the 
highest-priority network packet and suspends encryption of the highest-priority network 
packet and encrypts the received higher-priority network packet. 

1 8. The network packet management system of claim 1 5, wherein the 
decryption module decrypts the network packets in order of priority with the highest- 
priority network packet being processed first. 

19. The network packet management system of claim 18, wherein the 
decryption module receives a higher-priority network packet during the decryption of the 
highest-priority network packet and suspends decryption of the highest-priority network 
packet and decrypts the received higher-priority network packet. 
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